Skip to content
OpenAdvisories
Low · 1.0 CVE-2025-64725 EUVD-2025-203443GHSA-m6hq-f4w9-qrjjPYSEC-2026-2042

Weblate has improper validation upon invitation acceptance

Published Dec 15, 2025 · Updated Dec 15, 2025 · Assigned by GitHub_M

Description

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended.

Affected products

VendorProductAffectedFixed
WeblateOrg weblate < 5.15 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI weblate < 5.15 5.15 GHSA-m6hq-f4w9-qrjj

References